Taocms v3.0.2 exists to contain an arbitrary file read vulnerability via the path parameter. SQL injection vulnerability via taocms\include\Model\Article.php.
taogogo taocms 3.0.2